User Account lockout policy

[Robert Milne]

Dear all,

How do you configure user account lockout policy (eg. lock out users after 5 repeated attempts if they supply the wrong login credentials) on HP-UX 11.0 and 11i ? I have looked in SAM under User Modify, select Modify Password Options and then under restrictions you can do things like set password aging etc. but cannot see how to set login attempt failures. Is this possible ?

Regards,

Rob.

[RAC_1]

You can set the options you want and many more if you convert your system to trusted mode. man tsconvert. Also make sure that you are up to date on patches-particularly security patches.

Once you convert to trusted mode, all passwords will expire. Do /usr/lbin/modprpw -V to avoid it.

man getprpw
man modprpw
man getprdef
man modprdef

[Robert Milne]

Hi RAC,

Thanks.
I did a man tsconvert on our 11.11 system but their was no manual for this. Would this have come with a particular security option or patch ?

Neither is their for getprdef and modprdef. Perhaps I am missing some installed module ?

All the best,

Rob.

[Prashanth.D.S]

Hi Rob,

You can get more information on trusted system enabling on the below mentioned link.. will try to find some more information on your query..

http://docs.hp.com/en/B2355-90121/ch01s04.html

Best Regards,
Prashanth

[RAC_1]

There might not be a man page for tsconvert. You can use SAM or command line (/etc/tsconvert -c) to convert to trusted system. SAM should be preferred.